 |
|
HP : 0 / 55
MP : 6 / 618
EXP : 20%
|
|
初涉江湖
成员等级: 3
发表总数: 20
金币总数: 60
所属组别: 普通成员
注册日期: 2005/03/6
|
我现在在调个项目，有点疑问请教：现在甲方有2个ISP出口，电信和网通，以网通为主，要求互为备份 。
情况如下：在只设端口IP和NAT时都能PING通该端口对面的网关（G0/0是电信的、G0/1是网通的也是主要上网口、2个口都接在光电转换器上），在设置完后不论是否接上电信线路，在CONSOLE和内部PC不能PING网通网关包括该端口IP，PC上显示：172。16。0。3不能抵达。请哪位GG、JJ说哈
配置如下：
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
!
!
ip sla monitor 1
type echo protocol ipIcmpEcho 2*2.209.216.1
ip sla monitor schedule 1 life forever start-time now
ip sla monitor 2
type echo protocol ipIcmpEcho 2*1.10.65.25
ip sla monitor schedule 2 life forever start-time now
!
!
track 123 rtr 1 reachability
!
track 124 rtr 2 reachability
!
interface GigabitEthernet0/0
description ISP-CHINA TELECOM
ip address 2*2.209.216.59 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface GigabitEthernet0/1
description ISP-CHINANETCOM
ip address 2*1.10.65.27 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/0/0
!
interface FastEthernet0/0/1
!
interface FastEthernet0/0/2
!
interface FastEthernet0/0/3
interface Vlan1
ip address 172.16.0.3 255.255.255.0
ip nat inside
ip virtual-reassembly
ip policy route-map test
!
ip classless
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0(可去掉）
ip route 198.41.0.0 255.255.0.0 172.16.0.1（可去掉）
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip nat inside source list 3 interface GigabitEthernet0/1 overload
ip nat inside source static 172.16.0.4 2*0.167.54.22
ip nat inside source static 172.16.0.2 2*1.10.65.26
ip nat inside source static 198.41.2.160 2*1.10.65.28
ip nat inside source static 198.41.2.161 2*2.209.216.59
!
access-list 1 permit any
access-list 3 permit any
!
route-map test permit 10
set ip next-hop verify-availability 2*1.10.65.25 10 track 124
set ip next-hop verify-availability 2*2.209.216.1 20 track 123
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
!
end
Router# |
